WN
Product
Windows NT
On CISA KEVExploited in the wild
267
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add Windows NT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1049 | – | Dec 31 | Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large… Affected: All versions, or not specified |
| CVE-2004-0567 | – | Dec 31 | The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly… Affected: 4.0; 4.0 |
| CVE-2004-1306 | – | Dec 31 | Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2004-1361 | – | Dec 23 | Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2004-1305 | – | Dec 23 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2004-0206 | – | Nov 3 | Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute… Affected: 4.0 |
| CVE-2004-0574 | – | Nov 3 | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003… Affected: 4.0 |
| CVE-2004-0569 | – | Nov 3 | The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly… Affected: 4.0 |
| CVE-2004-0208 | – | Nov 3 | The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain… Affected: 4.0 |
| CVE-2004-0207 | – | Nov 3 | "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows… Affected: 4.0 |
| CVE-2004-0201 | – | Aug 6 | Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2004-0212 | – | Aug 6 | Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code… Affected: 4.0; 4.0; 4.0 |
| CVE-2003-0807 | – | Jun 1 | Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server… Affected: 4.0; 4.0 |
| CVE-2003-0719 | – | Jun 1 | Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4,… Affected: 4.0 |
| CVE-2003-0533 | – | Jun 1 | Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a,… Affected: 4.0 |
| CVE-2004-0118 | – | Jun 1 | The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access… Affected: 4.0 |
| CVE-2004-0123 | – | Jun 1 | Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service… Affected: 4.0 |
| CVE-2003-0806 | – | Jun 1 | Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to… Affected: 4.0 |
| CVE-2004-0124 | – | Jun 1 | The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-2003-0906 | – | Jun 1 | Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1… Affected: 4.0 |
| CVE-2003-0910 | – | Jun 1 | The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel… Affected: 4.0 |
| CVE-2003-0825 | – | Mar 3 | The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets,… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +17 more |
| CVE-2003-0818 | – | Mar 3 | Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +17 more |
| CVE-2003-1407 | – | Dec 31 | Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command Affected: 4.0 |
| CVE-2003-0717 | – | Nov 17 | The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2003-0813 | – | Nov 17 | A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by… Affected: 4.0; 4.0 |
| CVE-2003-0711 | – | Nov 17 | Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2003-0660 | – | Nov 17 | The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2003-0659 | – | Nov 17 | Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2003-0661 | – | Oct 20 | The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2003-0528 | – | Sep 17 | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2003-0715 | – | Sep 17 | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2003-0525 | – | Aug 27 | The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +17 more |
| CVE-2003-0345 | – | Aug 18 | Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +27 more |
| CVE-2003-0352 | – | Aug 18 | Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2003-0469 | – | Aug 7 | Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Affected: 4.0; 4.0 |
| CVE-2003-0227 | – | Jun 9 | The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll,… Affected: 4.0 |
| CVE-2003-0112 | – | May 12 | Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2002-1561 | – | Apr 2 | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2003-0010 | – | Mar 24 | Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2003-0003 | – | Feb 7 | Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2002-1712 | – | Dec 31 | Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +18 more |
| CVE-2002-2028 | – | Dec 31 | The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +21 more |
| CVE-2002-2073 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via… Affected: 4.0 |
| CVE-2002-2401 | – | Dec 31 | NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +23 more |
| CVE-2002-1260 | – | Dec 23 | The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +22 more |
| CVE-2002-1258 | – | Dec 23 | Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +22 more |
| CVE-2002-1257 | – | Dec 23 | Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +22 more |
| CVE-2002-1325 | – | Dec 23 | Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +22 more |
| CVE-2002-1183 | – | Dec 11 | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of… Affected: 4.0 |